Skip to main content
This topic has been closed for replies.

1 reply

S
steveurow
Participant
August 12, 2012

there seems to me to be a security risk here. IsDefined("string") where string is from a url parameter or a form could be of the nature of being a javascript that is executed ! This can allow all sorts of access to webpages and code insertion right?

12Robots
12Robots
Participating Frequently
August 13, 2012

Could you offer an example of where this might be a security risk? I am not sure I see how checking to see if a variable exists would cause a problem. Perhaps an example could help clear it up.

jason

Terms & ConditionsAccessibility statement
Using the community Terms of use Privacy Cookie preferences Do not sell or share my personal information ad choicesAdChoices